Applies to:

Microsoft .NET Framework 3.5

The August 8, 2023 update for Windows Server 2012 includes security improvements in .NET Framework 3.5. We recommend that you apply this update as part of your regular maintenance routines. Verify that you have installed the required updates listed in the How to get this update section before installing this update.

Summary

CVE-2023-36899 - .NET Framework Remote Code Execution Vulnerability This security update addresses a vulnerability in applications on IIS using their parent application’s Application Pool which can lead to privilege escalation or other security bypasses. For more information see CVE 2023-36899.

Additional information about this update

The following articles contain additional information about this update as it relates to individual product versions.

  • 5029567 Description of the Security Only Update for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB5029567)

Known issues in this update

Microsoft is not currently aware of any issues in this update.

How to get this update

Before installing this update

Prerequisite:

To apply this update, you must have .NET Framework 3.5 installed.

Install this update

Release Channel

Available

Next Step

Windows Update and Microsoft Update

No

See the other options below.

Microsoft Update Catalog

Yes

To get the standalone package for this update, go to the Microsoft Update Catalog website.

Windows Server Update Services (WSUS)

Yes

This individual .NET Framework product update will be installed, as applicable, by applying the operating system update. For more information about operating system updates see additional information about this update section.

Restart requirement

You may need to restart the computer after you apply this update if any affected files are being used. We recommend that you exit all .NET Framework-based applications before you apply this update.

Update deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:

20230808 Security update deployment information: August 8, 2023

File Information

File hash information

File name

SHA256 hash

windows8-rt-kb5028979-x86.msu

B44B0609F4DE7FD2A058429B4B1FC0D80437038DF30803D24871EAA2DEE290C9

windows8-rt-kb5028979-x64.msu

DB93D9428BB630666F5076D09AEFAD61C12B3676C360DA67915C9EADD460A67D

File name

File version

File size

Date

Time

Platform

SP requirement

Service branch

System.web.regularexpressions.dll

2.0.50727.8974

98,304

07-Jul-2023

00:35

x86

None

Not applicable

Big5.nlp

Not applicable

66,728

11-Apr-2023

01:21

Not applicable

None

Not applicable

Bopomofo.nlp

Not applicable

82,172

11-Apr-2023

01:21

Not applicable

None

Not applicable

Ksc.nlp

Not applicable

116,756

11-Apr-2023

01:21

Not applicable

None

Not applicable

Mscorlib.dll

2.0.50727.8974

4,628,480

07-Jul-2023

00:35

x86

None

Not applicable

Normidna.nlp

Not applicable

59,342

11-Apr-2023

01:21

Not applicable

None

Not applicable

Normnfc.nlp

Not applicable

45,794

11-Apr-2023

01:21

Not applicable

None

Not applicable

Normnfd.nlp

Not applicable

39,284

11-Apr-2023

01:21

Not applicable

None

Not applicable

Normnfkc.nlp

Not applicable

66,384

11-Apr-2023

01:21

Not applicable

None

Not applicable

Normnfkd.nlp

Not applicable

60,294

11-Apr-2023

01:21

Not applicable

None

Not applicable

Prc.nlp

Not applicable

83,748

11-Apr-2023

01:21

Not applicable

None

Not applicable

Prcp.nlp

Not applicable

83,748

11-Apr-2023

01:21

Not applicable

None

Not applicable

Sortkey.nlp

Not applicable

262,148

11-Apr-2023

01:21

Not applicable

None

Not applicable

Sorttbls.nlp

Not applicable

20,320

11-Apr-2023

01:21

Not applicable

None

Not applicable

Xjis.nlp

Not applicable

28,288

11-Apr-2023

01:21

Not applicable

None

Not applicable

Aspnet_wp.exe

2.0.50727.8974

34,760

07-Jul-2023

00:35

x86

SPN

X86_NETFX-ASP

Mscordacwks.dll

2.0.50727.8974

993,728

07-Jul-2023

00:35

x86

None

Not applicable

Mscorwks.dll

2.0.50727.8974

6,414,232

07-Jul-2023

00:35

x86

None

Not applicable

Sos.dll

2.0.50727.8974

393,152

07-Jul-2023

00:35

x86

None

Not applicable

Webengine.dll

2.0.50727.8974

440,760

07-Jul-2023

00:35

x86

None

Not applicable

System.web.dll

2.0.50727.8974

5,292,032

07-Jul-2023

00:35

x86

None

Not applicable

File name

File version

File size

Date

Time

Platform

SP requirement

Service branch

Big5.nlp

Not applicable

66,728

05-Jul-2023

00:21

Not applicable

None

Not applicable

Bopomofo.nlp

Not applicable

82,172

05-Jul-2023

00:21

Not applicable

None

Not applicable

Ksc.nlp

Not applicable

116,756

05-Jul-2023

00:21

Not applicable

None

Not applicable

Mscorlib.dll

2.0.50727.8974

4,644,864

07-Jul-2023

00:30

x64

None

Not applicable

Normidna.nlp

Not applicable

59,342

05-Jul-2023

00:21

Not applicable

None

Not applicable

Normnfc.nlp

Not applicable

45,794

05-Jul-2023

00:21

Not applicable

None

Not applicable

Normnfd.nlp

Not applicable

39,284

05-Jul-2023

00:21

Not applicable

None

Not applicable

Normnfkc.nlp

Not applicable

66,384

05-Jul-2023

00:21

Not applicable

None

Not applicable

Normnfkd.nlp

Not applicable

60,294

05-Jul-2023

00:21

Not applicable

None

Not applicable

Prc.nlp

Not applicable

83,748

05-Jul-2023

00:21

Not applicable

None

Not applicable

Prcp.nlp

Not applicable

83,748

05-Jul-2023

00:21

Not applicable

None

Not applicable

Sortkey.nlp

Not applicable

262,148

05-Jul-2023

00:21

Not applicable

None

Not applicable

Sorttbls.nlp

Not applicable

20,320

05-Jul-2023

00:21

Not applicable

None

Not applicable

Xjis.nlp

Not applicable

28,288

05-Jul-2023

00:21

Not applicable

None

Not applicable

Aspnet_wp.exe

2.0.50727.8974

46,520

07-Jul-2023

00:30

x64

SPN

AMD64_NETFX-ASP

Mscordacwks.dll

2.0.50727.8974

1,760,704

07-Jul-2023

00:30

x64

None

Not applicable

Mscorwks.dll

2.0.50727.8974

10,626,480

07-Jul-2023

00:30

x64

None

Not applicable

Sos.dll

2.0.50727.8974

489,368

07-Jul-2023

00:30

x64

None

Not applicable

System.web.regularexpressions.dll

2.0.50727.8974

98,304

07-Jul-2023

00:30

x86

None

Not applicable

Webengine.dll

2.0.50727.8974

750,000

07-Jul-2023

00:30

x64

None

Not applicable

System.web.dll

2.0.50727.8974

5,300,224

07-Jul-2023

00:30

x64

None

Not applicable

System.web.regularexpressions.dll

2.0.50727.8974

98,304

07-Jul-2023

00:35

x86

None

Not applicable

Big5.nlp

Not applicable

66,728

11-Apr-2023

01:21

Not applicable

None

Not applicable

Bopomofo.nlp

Not applicable

82,172

11-Apr-2023

01:21

Not applicable

None

Not applicable

Ksc.nlp

Not applicable

116,756

11-Apr-2023

01:21

Not applicable

None

Not applicable

Mscorlib.dll

2.0.50727.8974

4,628,480

07-Jul-2023

00:35

x86

None

Not applicable

Normidna.nlp

Not applicable

59,342

11-Apr-2023

01:21

Not applicable

None

Not applicable

Normnfc.nlp

Not applicable

45,794

11-Apr-2023

01:21

Not applicable

None

Not applicable

Normnfd.nlp

Not applicable

39,284

11-Apr-2023

01:21

Not applicable

None

Not applicable

Normnfkc.nlp

Not applicable

66,384

11-Apr-2023

01:21

Not applicable

None

Not applicable

Normnfkd.nlp

Not applicable

60,294

11-Apr-2023

01:21

Not applicable

None

Not applicable

Prc.nlp

Not applicable

83,748

11-Apr-2023

01:21

Not applicable

None

Not applicable

Prcp.nlp

Not applicable

83,748

11-Apr-2023

01:21

Not applicable

None

Not applicable

Sortkey.nlp

Not applicable

262,148

11-Apr-2023

01:21

Not applicable

None

Not applicable

Sorttbls.nlp

Not applicable

20,320

11-Apr-2023

01:21

Not applicable

None

Not applicable

Xjis.nlp

Not applicable

28,288

11-Apr-2023

01:21

Not applicable

None

Not applicable

Aspnet_wp.exe

2.0.50727.8974

34,760

07-Jul-2023

00:35

x86

SPN

X86_NETFX-ASP

Mscordacwks.dll

2.0.50727.8974

993,728

07-Jul-2023

00:35

x86

None

Not applicable

Mscorwks.dll

2.0.50727.8974

6,414,232

07-Jul-2023

00:35

x86

None

Not applicable

Sos.dll

2.0.50727.8974

393,152

07-Jul-2023

00:35

x86

None

Not applicable

Webengine.dll

2.0.50727.8974

440,760

07-Jul-2023

00:35

x86

None

Not applicable

System.web.dll

2.0.50727.8974

5,292,032

07-Jul-2023

00:35

x86

None

Not applicable

How to obtain help and support for this update

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.